Which set of measures reduces risk in Wi-Fi networks?

• A. Use strong WPA3 encryption, disable WPS, and control access with strong authentication
• B. Use WEP, enable WPS, and keep default password
• C. Use WPA2 with strong authentication and disable WPS
• D. Use open networks with no encryption

Answer: (A)

Securing wireless networks hinges on protecting the data in transit, ensuring only authorized devices can connect, and minimizing the attack surface by disabling features with known weaknesses. Using strong WPA3 encryption provides the latest handshake protections, making it much harder for attackers to guess passwords or intercept traffic, and it helps keep sessions secure even if credentials are compromised. Disabling WPS removes a common entry point that attackers can exploit to gain access quickly, since WPS PINs and configurations have well-documented weaknesses. Enforcing strong authentication means devices and users must prove their identity with robust credentials, reducing the chance of unauthorized connections.

Other options leave meaningful gaps: WEP is fundamentally insecure and easily cracked; enabling WPS reintroduces a vulnerability even if other protections are in place; using default passwords or open networks provides little to no protection and exposes traffic to eavesdropping and unauthorized access.